JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.1.123.67

128.1.123.67 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 47%: ?

47%

ISP	Zenlayer Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62610
Domain Name	zenlayer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.1.123.67

Whois 128.1.123.67

IP Abuse Reports for 128.1.123.67:

This IP address has been reported a total of 14 times from 8 distinct sources. 128.1.123.67 was first reported on May 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-23 19:08:54 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇸🇬 mypatricks	2026-06-23 05:51:51 (1 day ago)	128.1.123.67 \| Port: 10121 \| DNS: 128.1.123.67 2026-06-23T13:51:50+08:00 Europe/Berlin \| FETCH Sproo ... show more 128.1.123.67 \| Port: 10121 \| DNS: 128.1.123.67 2026-06-23T13:51:50+08:00 Europe/Berlin \| FETCH Sproofing Activity Detetced. \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1755626594&feadeebf8c=717 \| Ref: - \| Country: DE/Germany/+01:00 IP City: Frankfurt am Main a10139246e883eba-FRA/Frankfurt, Germany 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇪🇸 el-brujo	2026-06-22 23:57:19 (2 days ago)	Cloudflare WAF: Request Path: /Themes/default/images/post/xx.png Request Query: Host: forum.elhacke ... show more Cloudflare WAF: Request Path: /Themes/default/images/post/xx.png Request Query: Host: forum.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Zenlayer Inc Country: DE Method: GET Timestamp: 2026-06-22T23:57:19Z ruleId: 770fb332273f47628e1c012f2ac4e3d3. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-19 02:46:03 (6 days ago)	Scraping webshop URLs (www.creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 london2038.com	2026-06-15 07:40:24 (1 week ago)	Connection atttempts against closed TCP ports Jun 15 09:40:09 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports Jun 15 09:40:09 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=38788 DPT=443 WINDOW=0 RES=0x00 RST Jun 15 09:40:10 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=38788 DPT=443 WINDOW=0 RES=0x00 RST Jun 15 09:40:10 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=38788 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-13 00:42:31 (1 week ago)	Connection atttempts against closed TCP ports Jun 13 02:42:30 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports Jun 13 02:42:30 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=44346 DPT=443 WINDOW=0 RES=0x00 RST Jun 13 02:42:30 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=44346 DPT=443 WINDOW=0 RES=0x00 RST Jun 13 02:42:30 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=44346 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-09 10:05:11 (2 weeks ago)	Connection atttempts against closed TCP ports Jun 9 10:18:12 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports Jun 9 10:18:12 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=42042 DPT=443 WINDOW=0 RES=0x00 RST Jun 9 10:18:13 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=42042 DPT=443 WINDOW=0 RES=0x00 RST Jun 9 12:05:10 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=38650 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇺🇸 xmission.com	2026-06-07 02:28:19 (2 weeks ago)	Blocked by UFW (TCP on 80) Source port: 60478 TTL: 44 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 60478 TTL: 44 Packet length: 40 TOS: 0x08 This report (for 128.1.123.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 london2038.com	2026-06-05 01:08:10 (2 weeks ago)	Connection atttempts against closed TCP ports Jun 5 00:24:56 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports Jun 5 00:24:56 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=59842 DPT=443 WINDOW=0 RES=0x00 RST Jun 5 00:25:09 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=59842 DPT=443 WINDOW=0 RES=0x00 RST Jun 5 03:08:09 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=46014 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-03 10:22:44 (3 weeks ago)	Connection atttempts against closed TCP ports Jun 3 12:22:42 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports Jun 3 12:22:42 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=38150 DPT=443 WINDOW=0 RES=0x00 RST Jun 3 12:22:42 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=38150 DPT=443 WINDOW=0 RES=0x00 RST Jun 3 12:22:43 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=38150 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇫🇷 ✨	2026-06-01 23:46:12 (3 weeks ago)	Rule : Security Rule: Security Event: Security 0 - %592 128.1.123.67 43478 *hidden-privacy* 8 ... show more Rule : Security Rule: Security Event: Security 0 - %592 128.1.123.67 43478 *hidden-privacy* 80 6 243552 %597 13 show less	Port Scan Hacking Brute-Force
🇩🇪 london2038.com	2026-05-30 12:00:53 (3 weeks ago)	Connection atttempts against closed TCP ports May 30 13:59:19 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports May 30 13:59:19 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=44788 DPT=443 WINDOW=0 RES=0x00 RST May 30 14:00:52 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=37176 DPT=443 WINDOW=0 RES=0x00 RST May 30 14:00:53 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=37176 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-05-27 18:45:56 (4 weeks ago)	Connection atttempts against closed TCP ports May 27 20:45:54 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 ... show more Connection atttempts against closed TCP ports May 27 20:45:54 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=39734 DPT=443 WINDOW=0 RES=0x00 RST May 27 20:45:54 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=39734 DPT=443 WINDOW=0 RES=0x00 RST May 27 20:45:55 BLOCK SRC=128.1.123.67 LEN=40 TOS=0x08 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=39734 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: b6ab912e-2c64-47f8-9bc5-5ca06fd7e692	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.191

🇫🇮 147.185.133.86

🇩🇪 139.162.164.127

🇺🇸 20.29.58.2

🇵🇱 195.116.145.127

🇺🇸 172.253.8.156

🇳🇬 152.32.142.138

🇮🇳 144.16.144.93

🇳🇴 95.214.100.190

🇺🇸 71.6.240.106

🇦🇺 45.132.225.143

🇬🇧 35.203.210.156

🇰🇷 1.227.228.131

🇧🇷 207.248.16.72

🇹🇼 198.235.24.111

🇺🇸 173.31.10.3

🇲🇦 154.146.240.123

🇺🇸 147.185.132.67

🇨🇳 115.191.9.205

🇻🇳 103.1.210.25